CVE-2008-2688

ASPilot Pilot Cart 7.3 is affected by SQL injection via the article parameter (pilot.asp and kb.asp) that is used in SQL queries without proper sanitization, enabling remote arbitrary SQL execution. This CVE (CVE-2008-2688) covers the article parameter; related entries confirm the same issue acro...

CVE-2008-2688

SQL injection vulnerability in pilot.asp in ASPilot Pilot Cart 7.3 allows remote attackers to execute arbitrary SQL commands via the article parameter in a kb action...

E-SMART CART (productsofcat.asp) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications =================================================================== E-SMART CART productsofcat.asp Remote SQL Injection Vulnerability =================================================================== + Info: Bug found by JosS EspSeC &...

esmartcart-sql.txt

--==+=================== Spanish Hackers Team www.spanish-hackers.com =================+==-- --==+ E-SMART CART productsofcat.asp Remote SQL Injection Vulnerability +==-- --==+====================================================================================+==-- - dreaming of necessity is reas...

E-Smart Cart - productsofcat.asp SQL Injection

E-Smart Cart - productsofcat.asp SQL Injection --==+=================== Spanish Hackers Team www.spanish-hackers.com =================+==-- --==+ E-SMART CART productsofcat.asp Remote SQL Injection Vulnerability +==--...

E-Smart Cart - 'productsofcat.asp' SQL Injection

--==+=================== Spanish Hackers Team www.spanish-hackers.com =================+==-- --==+ E-SMART CART productsofcat.asp Remote SQL Injection Vulnerability +==-- --==+====================================================================================+==-- - dreaming of necessity is reas...

ASPilot Pilot Cart 7.3 (article) Remote SQL Injection Vulnerability

No description provided by source. |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ /'\ \ /\ \ \ \ /'\ \ | | \ \ /\ /\ \ \ \ /\ \L\ /\ /\ \ \ \ \ \ \ / /\ \L\ \ | |...

ASPilot Pilot Cart 7.3 (article) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications =================================================================== ASPilot Pilot Cart 7.3 article Remote SQL Injection Vulnerability ===================================================================...

ASPilot Pilot Cart 7.3 - article SQL Injection

ASPilot Pilot Cart 7.3 - article SQL Injection |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ Kings of injection | | // | | |...

aspilot-sql.txt

|-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ Kings of injection | | // | | | |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| + Script Name : Pilot...

CKGold Shopping Cart 2.5 (category_id) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================== CKGold Shopping Cart 2.5 categoryid SQL Injection Vulnerability ================================================================== Script page : http://cartkeeper.com Demo...

CKGold Shopping Cart 2.5 - category_id SQL Injection

CKGold Shopping Cart 2.5 - categoryid SQL Injection Cr@zyKing / [email protected] CKGold Shopping Cart 2.5 categoryid SQL Injection Vulnerability Script page : http://cartkeeper.com Demo Page : http://ckgold.cartkeeper.com Commercial License Price: $99.00 Commercial License Price: $79.95 :|...

ckgold25-sql.txt

Cr@zyKing / [email protected] CKGold Shopping Cart 2.5 categoryid SQL Injection Vulnerability Script page : http://cartkeeper.com Demo Page : http://ckgold.cartkeeper.com Commercial License Price: $99.00 Commercial License Price: $79.95 :| http://localhost/item.php?itemid=-1&categoryid=Sql...

CKGold Shopping Cart 2.5 - 'category_id' SQL Injection

Cr@zyKing / [email protected] CKGold Shopping Cart 2.5 categoryid SQL Injection Vulnerability Script page : http://cartkeeper.com Demo Page : http://ckgold.cartkeeper.com Commercial License Price: $99.00 Commercial License Price: $79.95 :| http://localhost/item.php?itemid=-1&categoryid=Sql...

CAFEMILK Shopping Cart CGI cross-site scripting vulnerability

Overview CAFEMILK Shopping Cart CGI contains a cross-site scripting vulnerability as it does not properly validate input strings. Impact A malicious script may be executed on the user's web browser. Personal information, recorded in cookies issued by CAFEMILK SHOPPING CART CGI, may be leaked...

QUICK CART OS command injection vulnerability

Overview QUICK CART is a shopping cart system that provides functionalities used for managing an Internet store. An OS command injection vulnerability exists in QUICK CART as it does not properly validate the user input. Impact A remote attacker could execute arbitrary operating system commands o...

QUICK CART cross-site scripting vulnerability

Overview QUICK CART is a shopping cart system for building Internet shop sites. QUICK CART contains a cross-site scripting vulnerability as it does not validate inputs properly. Impact An arbitrary script could be executed on the user's web browser. Solution None...

Cross-site scripting vulnerabilities in multiple Hal Networks shopping cart products

Overview Multiple Hal Networks shopping cart software products are vulnerable to cross-site scripting. Multiple shopping cart software products are affected by this vulnerability. For details, see the information provided by Hal Networks. Impact An arbitrary script can be executed on the user's w...

Sql injection

SQL injection vulnerability in index.php in Turnkey Web Tools SunShop Shopping Cart 3.5.1 allows remote attackers to execute arbitrary SQL commands via the id parameter in an item action, a different vector than CVE-2008-2038, CVE-2007-4597, and CVE-2007-2549...

CVE-2008-2339

SQL injection vulnerability in index.php in Turnkey Web Tools SunShop Shopping Cart 3.5.1 allows remote attackers to execute arbitrary SQL commands via the id parameter in an item action, a different vector than CVE-2008-2038, CVE-2007-4597, and CVE-2007-2549...